Protecting media items using a media security controller

Patent metadata

Field	Value
Publication number	US-10460084-B2
Application number	US-201816122362-A
Country	US
Kind code	B2
Filing date	Sep 5, 2018
Priority date	Jul 18, 2012
Publication date	Oct 29, 2019
Grant date	Oct 29, 2019

Abstract

A media storage device includes a media security controller circuit and a memory to store data that relates to a media item to be rendered by a rendering device. The media security controller circuit sends a message to the rendering device that causes the rendering device to obtain a portion of data from memory of the media storage device and provide it to the media security controller circuit. The portion is received and transformed by the media security controller circuit. The media security controller circuit sends the transformed portion to the rendering device.

First claim

What is claimed is:

1. A method comprising:
receiving, by a media security controller circuit of a media storage device from a rendering device, a request to render a media item that is stored in a memory of the media storage device;
sending to the rendering device, by the media security controller circuit in response to receiving the request, an authorization file stored in memory of the media storage device, the authorization file comprising first instructions to be executed by the media security controller circuit and second instructions to be executed by the rendering device to render the media item;
receiving, by the media security controller circuit, at least a portion of the authorization file from the rendering device, wherein the portion of the authorization file comprises the first instructions;
executing, by the media security controller circuit, the first instructions to send to the rendering device a message for the rendering device to obtain a portion of data from the memory of the media storage device and to provide the portion of the data to the media security controller circuit, wherein the data in the memory of the media storage device relates to the media item to be rendered by the rendering device;
receiving from the rendering device, by the media security controller circuit, the portion of the data obtained by the rendering device from the memory of the media storage device;
transforming, by the media security controller circuit, the portion of the data obtained by the rendering device from the memory of the media storage device; and
sending to the rendering device, by the media security controller circuit, the transformed portion of the data.

2. The method of claim 1 , wherein the transformed portion of the data comprises data for the rendering device to render the media item.

3. The method of claim 1 , wherein transforming the portion of the data comprises at least one of decrypting the portion of the data, encrypting the portion of the data, or compressing the portion of the data.

4. The method of claim 1 , wherein the media security controller circuit comprises a second memory to store an authorization key corresponding to the transformed portion of the data, and wherein transforming the portion of the data comprises decrypting, by the media security controller circuit, the portion of the data using the authorization key.

5. The method of claim 1 , further comprising:
performing a first handshake between the media security controller circuit and the rendering device based on public key infrastructure cryptography;
performing a second handshake between the media storage device and the rendering device based on symmetric key cryptography; and
establishing a secure session with the rendering device based on the first handshake and the second handshake.

6. The method of claim 1 , wherein transforming the portion of the data comprises:
receiving, by the media security controller circuit, a set of instructions specifying an authorization key for transforming the portion of the data, wherein the set of instructions enable forensic analysis to identify the media security controller circuit to a third party; and
creating, by the media security controller circuit, the transformed portion of the data using the authorization key, wherein the transformed portion of the data identifies the media security controller circuit to the third party.

7. The method of claim 1 , further comprising:
synchronizing a first certificate revision list of the media security controller circuit with a second certificate revision list of the rendering device, wherein the first certificate revision list and the second certificate revision list describe one or more changes to a set of rights.

8. An apparatus comprising:
means for receiving, from a rendering device, a request to render a media item that is stored in a memory of a media storage device, wherein the means for receiving is integrated within the media storage device;
means for sending to the rendering device, in response to receiving the request, an authorization file stored in memory of the media storage device, the authorization file comprising first instructions and second instructions to be executed by the rendering device to render the media item;
means for receiving at least a portion of the authorization file from the rendering device, wherein the portion of the authorization file comprises the first instructions;
means for executing the first instructions received in the portion of the authorization file, the means for executing sends to the rendering device a message for the rendering device to obtain a portion of data from the memory of the media storage device and to provide the portion of the data to the media storage device, wherein the data in the memory of the media storage device relates to the media item to be rendered by the rendering device, wherein the data in the memory of the media storage device is stored according to a file system unknown to the means for executing;
means for receiving from the rendering device the portion of the data obtained by the rendering device from the memory of the media storage device;
means for transforming the portion of the data obtained by the rendering device from the memory of the media storage device; and
means for sending to the rendering device the transformed portion of the data.

9. The apparatus of claim 8 , wherein the transformed portion of the data comprises data for the rendering device to render the media item.

10. The apparatus of claim 8 , further comprising at least one of:
means for decrypting the portion of the data;
means for encrypting the portion of the data; or
means for compressing the portion of the data.

11. The apparatus of claim 8 , further comprising means for decrypting the portion of the data using an authorization key stored in a second memory, the authorization key corresponding to the transformed portion of the data.

12. The apparatus of claim 8 , further comprising:
means for performing a first handshake with the rendering device based on public key infrastructure cryptography;
means for performing a second handshake with the rendering device based on symmetric key cryptography; and
means for establishing a secure session with the rendering device based on the first handshake and the second handshake.

13. The apparatus of claim 8 , further comprising:
means for receiving a set of instructions specifying an authorization key for transforming the portion of the data, wherein the set of instructions enable forensic analysis to identify the apparatus to a third party; and
means for creating the transformed portion of the data using the authorization key, wherein the transformed portion of the data identifies the apparatus to the third party.

14. The apparatus of claim 8 , further comprising:
means for synchronizing a first certificate revision list with a second certificate revision list at the rendering device, wherein the first certificate revision list and the second certificate revision list describe one or more changes to a set of rights.

15. An apparatus comprising:
means for sending a request to render a media item that is stored in a memory of a media storage device;
means for receiving an authorization file stored in the memory of the media storage device, the authorization file comprising first instructions to be executed by a media security controller circuit of the media storage device and second instructions;
means for receiving a message from the media security controller circuit, the message instructing the apparatus to read a port

Assignees

• Cryptography Res Inc

Inventors

• Kocher Paul C
• Handschuh Helena

Classifications

• G06F21/10 Primary

  Protecting distributed programs or content, e.g. vending or licensing of copyrighted material (protection in video systems or pay television H04N7/16) {; Digital rights management [DRM]} · CPC title

• G06F2221/0724

  Physics · mapped topic

• G06F21/1062 Primary

  Editing · CPC title